BADNEWS RAT Mutex Detection
The rule detects the creation of specific mutexes ('rendumm' or 'RfmbFv8D') that are known to be associated with the BADNEWS Remote Access Trojan (RAT). This activity indicates the presence and potential execution of the BADNEWS malware on a Windows system.
Sigma
